Demo Awesome

Demo Awesome has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.5 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (2) reported by Abdi Pranata.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Demo Awesome vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2024-13637

Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation

Read the full analysis

Vulnerability Records

3 records


2025-04-01 20:30	Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation Demo Awesome <= 1.0.3	`CVE-2024-13637`	6.5 Medium	Krzysztof Zając	No
2024-06-20 00:00	Demo Awesome <= 1.0.1 - Reflected Cross-Site Scripting Demo Awesome <= 1.0.1	`CVE-2024-37206`	6.1 Medium	Abdi Pranata	Yes
2024-06-20 00:00	Demo Awesome <= 1.0.2 - Missing Authorization Demo Awesome <= 1.0.2	`CVE-2024-37207`	4.3 Medium	Abdi Pranata	Yes

Showing 1–3 of 3 reports